I have a different idea other than banning: make companies pay a tax on each bit of user information they hold.
The word you were probably looking for is fines, but they would have to be punitive and extraordinarily risky to stop the practice...
We have different licenses for code and projects. Why not have something similar for user data / metadata